/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_LAZY.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec3_product42.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-10 18:15:25,864 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-10 18:15:25,866 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-10 18:15:25,930 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-10 18:15:25,930 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-10 18:15:25,933 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-10 18:15:25,935 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-10 18:15:25,937 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-10 18:15:25,938 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-10 18:15:25,941 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-10 18:15:25,942 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-10 18:15:25,943 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-10 18:15:25,943 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-10 18:15:25,944 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-10 18:15:25,945 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-10 18:15:25,947 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-10 18:15:25,948 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-10 18:15:25,948 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-10 18:15:25,950 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-10 18:15:25,954 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-10 18:15:25,955 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-10 18:15:25,955 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-10 18:15:25,957 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-10 18:15:25,957 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-10 18:15:25,962 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-10 18:15:25,962 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-10 18:15:25,962 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-10 18:15:25,963 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-10 18:15:25,963 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-10 18:15:25,964 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-10 18:15:25,964 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-10 18:15:25,965 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-10 18:15:25,966 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-10 18:15:25,966 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-10 18:15:25,967 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-10 18:15:25,967 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-10 18:15:25,968 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-10 18:15:25,968 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-10 18:15:25,968 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-10 18:15:25,968 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-10 18:15:25,969 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-10 18:15:25,969 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_LAZY.epf [2022-01-10 18:15:25,994 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-10 18:15:25,994 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-10 18:15:25,994 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-10 18:15:25,994 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-10 18:15:25,995 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-10 18:15:25,995 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-10 18:15:25,996 INFO L138 SettingsManager]: * Use SBE=true [2022-01-10 18:15:25,996 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-10 18:15:25,996 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-10 18:15:25,996 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-10 18:15:25,996 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-10 18:15:25,996 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-10 18:15:25,997 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-10 18:15:25,997 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-10 18:15:25,997 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-10 18:15:25,997 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-10 18:15:25,997 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-10 18:15:25,997 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-10 18:15:25,997 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-10 18:15:25,997 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-10 18:15:25,997 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-10 18:15:25,997 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 18:15:25,997 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-10 18:15:25,997 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-10 18:15:25,998 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-10 18:15:25,998 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-10 18:15:25,998 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-10 18:15:25,998 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-10 18:15:25,998 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-10 18:15:25,998 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-10 18:15:25,998 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-10 18:15:25,998 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-10 18:15:25,999 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-10 18:15:25,999 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_LAZY WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-10 18:15:26,177 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-10 18:15:26,196 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-10 18:15:26,198 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-10 18:15:26,199 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-10 18:15:26,199 INFO L275 PluginConnector]: CDTParser initialized [2022-01-10 18:15:26,200 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec3_product42.cil.c [2022-01-10 18:15:26,246 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4add31c10/4913a9415eaf4a33a977909d48786e8e/FLAG51e786b88 [2022-01-10 18:15:26,596 INFO L306 CDTParser]: Found 1 translation units. [2022-01-10 18:15:26,597 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec3_product42.cil.c [2022-01-10 18:15:26,605 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4add31c10/4913a9415eaf4a33a977909d48786e8e/FLAG51e786b88 [2022-01-10 18:15:26,997 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4add31c10/4913a9415eaf4a33a977909d48786e8e [2022-01-10 18:15:26,999 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-10 18:15:27,000 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-10 18:15:27,003 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-10 18:15:27,004 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-10 18:15:27,008 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-10 18:15:27,008 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 06:15:26" (1/1) ... [2022-01-10 18:15:27,010 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@61df47c2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:15:27, skipping insertion in model container [2022-01-10 18:15:27,010 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 06:15:26" (1/1) ... [2022-01-10 18:15:27,014 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-10 18:15:27,037 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 18:15:27,219 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec3_product42.cil.c[7477,7490] [2022-01-10 18:15:27,256 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:15:27,265 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-10 18:15:27,269 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 18:15:27,285 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec3_product42.cil.c[7477,7490] [2022-01-10 18:15:27,304 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:15:27,307 INFO L203 MainTranslator]: Completed pre-run [2022-01-10 18:15:27,327 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec3_product42.cil.c[7477,7490] [2022-01-10 18:15:27,357 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:15:27,369 INFO L208 MainTranslator]: Completed translation [2022-01-10 18:15:27,369 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:15:27 WrapperNode [2022-01-10 18:15:27,370 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-10 18:15:27,370 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-10 18:15:27,370 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-10 18:15:27,370 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-10 18:15:27,383 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:15:27" (1/1) ... [2022-01-10 18:15:27,403 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:15:27" (1/1) ... [2022-01-10 18:15:27,440 INFO L137 Inliner]: procedures = 56, calls = 153, calls flagged for inlining = 50, calls inlined = 60, statements flattened = 488 [2022-01-10 18:15:27,440 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-10 18:15:27,441 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-10 18:15:27,441 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-10 18:15:27,441 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-10 18:15:27,447 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:15:27" (1/1) ... [2022-01-10 18:15:27,447 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:15:27" (1/1) ... [2022-01-10 18:15:27,449 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:15:27" (1/1) ... [2022-01-10 18:15:27,450 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:15:27" (1/1) ... [2022-01-10 18:15:27,455 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:15:27" (1/1) ... [2022-01-10 18:15:27,459 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:15:27" (1/1) ... [2022-01-10 18:15:27,461 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:15:27" (1/1) ... [2022-01-10 18:15:27,463 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-10 18:15:27,464 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-10 18:15:27,464 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-10 18:15:27,464 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-10 18:15:27,465 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:15:27" (1/1) ... [2022-01-10 18:15:27,472 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 18:15:27,481 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 18:15:27,499 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-10 18:15:27,533 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-10 18:15:27,564 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-10 18:15:27,565 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-10 18:15:27,565 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-10 18:15:27,566 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-10 18:15:27,645 INFO L234 CfgBuilder]: Building ICFG [2022-01-10 18:15:27,647 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-10 18:15:27,953 INFO L275 CfgBuilder]: Performing block encoding [2022-01-10 18:15:27,958 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-10 18:15:27,958 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-10 18:15:27,959 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:15:27 BoogieIcfgContainer [2022-01-10 18:15:27,959 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-10 18:15:27,960 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-10 18:15:27,960 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-10 18:15:27,962 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-10 18:15:27,965 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:15:27" (1/1) ... [2022-01-10 18:15:28,049 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 06:15:28 BasicIcfg [2022-01-10 18:15:28,049 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-10 18:15:28,050 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-10 18:15:28,051 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-10 18:15:28,053 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-10 18:15:28,053 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.01 06:15:26" (1/4) ... [2022-01-10 18:15:28,053 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@11e0b62a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 06:15:28, skipping insertion in model container [2022-01-10 18:15:28,054 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:15:27" (2/4) ... [2022-01-10 18:15:28,054 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@11e0b62a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 06:15:28, skipping insertion in model container [2022-01-10 18:15:28,054 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:15:27" (3/4) ... [2022-01-10 18:15:28,054 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@11e0b62a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 06:15:28, skipping insertion in model container [2022-01-10 18:15:28,054 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 06:15:28" (4/4) ... [2022-01-10 18:15:28,055 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product42.cil.cTransformedIcfg [2022-01-10 18:15:28,061 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-10 18:15:28,061 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-10 18:15:28,108 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-10 18:15:28,112 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-10 18:15:28,112 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-10 18:15:28,126 INFO L276 IsEmpty]: Start isEmpty. Operand has 127 states, 123 states have (on average 1.3983739837398375) internal successors, (172), 126 states have internal predecessors, (172), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:28,130 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-01-10 18:15:28,131 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:15:28,131 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:15:28,131 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:15:28,135 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:15:28,135 INFO L85 PathProgramCache]: Analyzing trace with hash -13948437, now seen corresponding path program 1 times [2022-01-10 18:15:28,142 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:15:28,142 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1882029812] [2022-01-10 18:15:28,142 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:15:28,143 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:15:28,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:15:28,366 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:15:28,367 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:15:28,368 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1882029812] [2022-01-10 18:15:28,368 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1882029812] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:15:28,368 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:15:28,368 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:15:28,369 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1556753808] [2022-01-10 18:15:28,370 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:15:28,374 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-10 18:15:28,375 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:15:28,397 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-10 18:15:28,397 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 18:15:28,400 INFO L87 Difference]: Start difference. First operand has 127 states, 123 states have (on average 1.3983739837398375) internal successors, (172), 126 states have internal predecessors, (172), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:28,435 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:15:28,435 INFO L93 Difference]: Finished difference Result 244 states and 333 transitions. [2022-01-10 18:15:28,436 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-10 18:15:28,437 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-01-10 18:15:28,437 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:15:28,446 INFO L225 Difference]: With dead ends: 244 [2022-01-10 18:15:28,446 INFO L226 Difference]: Without dead ends: 117 [2022-01-10 18:15:28,449 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 18:15:28,452 INFO L933 BasicCegarLoop]: 162 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 162 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:15:28,453 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 162 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:15:28,466 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117 states. [2022-01-10 18:15:28,484 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117 to 117. [2022-01-10 18:15:28,486 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 117 states, 114 states have (on average 1.3508771929824561) internal successors, (154), 116 states have internal predecessors, (154), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:28,490 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 117 states to 117 states and 154 transitions. [2022-01-10 18:15:28,490 INFO L78 Accepts]: Start accepts. Automaton has 117 states and 154 transitions. Word has length 19 [2022-01-10 18:15:28,491 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:15:28,491 INFO L470 AbstractCegarLoop]: Abstraction has 117 states and 154 transitions. [2022-01-10 18:15:28,491 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:28,492 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states and 154 transitions. [2022-01-10 18:15:28,494 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-01-10 18:15:28,494 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:15:28,495 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:15:28,495 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-10 18:15:28,495 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:15:28,497 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:15:28,497 INFO L85 PathProgramCache]: Analyzing trace with hash 1432591082, now seen corresponding path program 1 times [2022-01-10 18:15:28,497 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:15:28,497 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1460030171] [2022-01-10 18:15:28,497 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:15:28,498 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:15:28,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:15:28,578 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:15:28,579 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:15:28,579 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1460030171] [2022-01-10 18:15:28,579 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1460030171] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:15:28,579 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:15:28,579 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:15:28,580 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [264127591] [2022-01-10 18:15:28,580 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:15:28,581 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:15:28,581 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:15:28,582 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:15:28,585 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:15:28,585 INFO L87 Difference]: Start difference. First operand 117 states and 154 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:28,625 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:15:28,625 INFO L93 Difference]: Finished difference Result 227 states and 301 transitions. [2022-01-10 18:15:28,625 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:15:28,625 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-01-10 18:15:28,626 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:15:28,627 INFO L225 Difference]: With dead ends: 227 [2022-01-10 18:15:28,627 INFO L226 Difference]: Without dead ends: 117 [2022-01-10 18:15:28,628 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:15:28,628 INFO L933 BasicCegarLoop]: 148 mSDtfsCounter, 139 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 139 SdHoareTripleChecker+Valid, 148 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:15:28,629 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [139 Valid, 148 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:15:28,629 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117 states. [2022-01-10 18:15:28,634 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117 to 117. [2022-01-10 18:15:28,635 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 117 states, 114 states have (on average 1.3245614035087718) internal successors, (151), 116 states have internal predecessors, (151), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:28,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 117 states to 117 states and 151 transitions. [2022-01-10 18:15:28,636 INFO L78 Accepts]: Start accepts. Automaton has 117 states and 151 transitions. Word has length 20 [2022-01-10 18:15:28,636 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:15:28,636 INFO L470 AbstractCegarLoop]: Abstraction has 117 states and 151 transitions. [2022-01-10 18:15:28,636 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:28,636 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states and 151 transitions. [2022-01-10 18:15:28,637 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-01-10 18:15:28,641 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:15:28,641 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:15:28,641 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-10 18:15:28,641 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:15:28,641 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:15:28,641 INFO L85 PathProgramCache]: Analyzing trace with hash 1250315575, now seen corresponding path program 1 times [2022-01-10 18:15:28,642 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:15:28,642 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1860132201] [2022-01-10 18:15:28,642 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:15:28,642 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:15:28,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:15:28,695 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:15:28,695 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:15:28,695 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1860132201] [2022-01-10 18:15:28,695 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1860132201] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:15:28,695 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:15:28,695 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:15:28,696 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1925999807] [2022-01-10 18:15:28,696 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:15:28,696 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:15:28,696 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:15:28,696 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:15:28,696 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:15:28,697 INFO L87 Difference]: Start difference. First operand 117 states and 151 transitions. Second operand has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:28,742 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:15:28,742 INFO L93 Difference]: Finished difference Result 295 states and 382 transitions. [2022-01-10 18:15:28,742 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:15:28,742 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2022-01-10 18:15:28,743 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:15:28,745 INFO L225 Difference]: With dead ends: 295 [2022-01-10 18:15:28,745 INFO L226 Difference]: Without dead ends: 185 [2022-01-10 18:15:28,747 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:15:28,748 INFO L933 BasicCegarLoop]: 156 mSDtfsCounter, 115 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 115 SdHoareTripleChecker+Valid, 243 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:15:28,748 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [115 Valid, 243 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:15:28,751 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2022-01-10 18:15:28,760 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 179. [2022-01-10 18:15:28,761 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 179 states, 176 states have (on average 1.3011363636363635) internal successors, (229), 178 states have internal predecessors, (229), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:28,762 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 229 transitions. [2022-01-10 18:15:28,762 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 229 transitions. Word has length 23 [2022-01-10 18:15:28,762 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:15:28,762 INFO L470 AbstractCegarLoop]: Abstraction has 179 states and 229 transitions. [2022-01-10 18:15:28,762 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:28,762 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 229 transitions. [2022-01-10 18:15:28,763 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-01-10 18:15:28,763 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:15:28,763 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:15:28,763 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-10 18:15:28,763 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:15:28,763 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:15:28,764 INFO L85 PathProgramCache]: Analyzing trace with hash 1469554561, now seen corresponding path program 1 times [2022-01-10 18:15:28,764 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:15:28,764 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [724569214] [2022-01-10 18:15:28,764 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:15:28,764 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:15:28,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:15:28,806 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:15:28,806 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:15:28,820 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [724569214] [2022-01-10 18:15:28,820 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [724569214] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:15:28,820 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:15:28,820 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:15:28,820 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1559358915] [2022-01-10 18:15:28,820 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:15:28,821 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 18:15:28,821 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:15:28,821 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 18:15:28,821 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 18:15:28,822 INFO L87 Difference]: Start difference. First operand 179 states and 229 transitions. Second operand has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:28,897 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:15:28,897 INFO L93 Difference]: Finished difference Result 683 states and 874 transitions. [2022-01-10 18:15:28,897 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 18:15:28,897 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-01-10 18:15:28,898 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:15:28,900 INFO L225 Difference]: With dead ends: 683 [2022-01-10 18:15:28,900 INFO L226 Difference]: Without dead ends: 511 [2022-01-10 18:15:28,901 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:15:28,902 INFO L933 BasicCegarLoop]: 174 mSDtfsCounter, 387 mSDsluCounter, 342 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 387 SdHoareTripleChecker+Valid, 516 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:15:28,902 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [387 Valid, 516 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:15:28,903 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 511 states. [2022-01-10 18:15:28,918 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 511 to 185. [2022-01-10 18:15:28,919 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 185 states, 182 states have (on average 1.2912087912087913) internal successors, (235), 184 states have internal predecessors, (235), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:28,919 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 185 states to 185 states and 235 transitions. [2022-01-10 18:15:28,920 INFO L78 Accepts]: Start accepts. Automaton has 185 states and 235 transitions. Word has length 29 [2022-01-10 18:15:28,920 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:15:28,920 INFO L470 AbstractCegarLoop]: Abstraction has 185 states and 235 transitions. [2022-01-10 18:15:28,920 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:28,920 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 235 transitions. [2022-01-10 18:15:28,921 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-01-10 18:15:28,921 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:15:28,921 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:15:28,921 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-10 18:15:28,921 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:15:28,921 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:15:28,922 INFO L85 PathProgramCache]: Analyzing trace with hash 1975113186, now seen corresponding path program 1 times [2022-01-10 18:15:28,922 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:15:28,922 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1625247509] [2022-01-10 18:15:28,922 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:15:28,922 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:15:28,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:15:29,003 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:15:29,003 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:15:29,004 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1625247509] [2022-01-10 18:15:29,004 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1625247509] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:15:29,004 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:15:29,004 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:15:29,004 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2065503185] [2022-01-10 18:15:29,004 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:15:29,004 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:15:29,005 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:15:29,005 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:15:29,005 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:15:29,005 INFO L87 Difference]: Start difference. First operand 185 states and 235 transitions. Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 4 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:29,227 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:15:29,227 INFO L93 Difference]: Finished difference Result 979 states and 1249 transitions. [2022-01-10 18:15:29,231 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-01-10 18:15:29,231 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 4 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-01-10 18:15:29,231 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:15:29,233 INFO L225 Difference]: With dead ends: 979 [2022-01-10 18:15:29,233 INFO L226 Difference]: Without dead ends: 567 [2022-01-10 18:15:29,234 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-01-10 18:15:29,235 INFO L933 BasicCegarLoop]: 242 mSDtfsCounter, 620 mSDsluCounter, 601 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 620 SdHoareTripleChecker+Valid, 843 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:15:29,235 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [620 Valid, 843 Invalid, 151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:15:29,239 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 567 states. [2022-01-10 18:15:29,265 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 567 to 251. [2022-01-10 18:15:29,266 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 251 states, 248 states have (on average 1.282258064516129) internal successors, (318), 250 states have internal predecessors, (318), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:29,266 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 251 states to 251 states and 318 transitions. [2022-01-10 18:15:29,266 INFO L78 Accepts]: Start accepts. Automaton has 251 states and 318 transitions. Word has length 29 [2022-01-10 18:15:29,266 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:15:29,267 INFO L470 AbstractCegarLoop]: Abstraction has 251 states and 318 transitions. [2022-01-10 18:15:29,267 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 4 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:29,269 INFO L276 IsEmpty]: Start isEmpty. Operand 251 states and 318 transitions. [2022-01-10 18:15:29,273 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-01-10 18:15:29,274 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:15:29,274 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:15:29,274 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-10 18:15:29,274 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:15:29,274 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:15:29,274 INFO L85 PathProgramCache]: Analyzing trace with hash 1369648411, now seen corresponding path program 1 times [2022-01-10 18:15:29,275 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:15:29,275 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1421430173] [2022-01-10 18:15:29,275 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:15:29,275 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:15:29,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:15:29,380 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:15:29,380 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:15:29,381 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1421430173] [2022-01-10 18:15:29,381 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1421430173] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:15:29,381 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:15:29,381 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-10 18:15:29,381 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [702505640] [2022-01-10 18:15:29,381 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:15:29,382 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-01-10 18:15:29,382 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:15:29,382 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-01-10 18:15:29,382 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-01-10 18:15:29,382 INFO L87 Difference]: Start difference. First operand 251 states and 318 transitions. Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 6 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:29,545 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:15:29,545 INFO L93 Difference]: Finished difference Result 711 states and 905 transitions. [2022-01-10 18:15:29,545 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-01-10 18:15:29,546 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 6 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-01-10 18:15:29,546 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:15:29,549 INFO L225 Difference]: With dead ends: 711 [2022-01-10 18:15:29,549 INFO L226 Difference]: Without dead ends: 467 [2022-01-10 18:15:29,549 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-01-10 18:15:29,552 INFO L933 BasicCegarLoop]: 233 mSDtfsCounter, 155 mSDsluCounter, 962 mSDsCounter, 0 mSdLazyCounter, 135 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 155 SdHoareTripleChecker+Valid, 1195 SdHoareTripleChecker+Invalid, 147 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 135 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:15:29,555 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [155 Valid, 1195 Invalid, 147 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 135 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:15:29,556 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 467 states. [2022-01-10 18:15:29,592 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 467 to 461. [2022-01-10 18:15:29,593 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 461 states, 458 states have (on average 1.2707423580786026) internal successors, (582), 460 states have internal predecessors, (582), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:29,594 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 461 states to 461 states and 582 transitions. [2022-01-10 18:15:29,594 INFO L78 Accepts]: Start accepts. Automaton has 461 states and 582 transitions. Word has length 38 [2022-01-10 18:15:29,595 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:15:29,595 INFO L470 AbstractCegarLoop]: Abstraction has 461 states and 582 transitions. [2022-01-10 18:15:29,595 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 6 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:29,595 INFO L276 IsEmpty]: Start isEmpty. Operand 461 states and 582 transitions. [2022-01-10 18:15:29,596 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-01-10 18:15:29,596 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:15:29,596 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:15:29,597 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-10 18:15:29,597 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:15:29,597 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:15:29,597 INFO L85 PathProgramCache]: Analyzing trace with hash 859114234, now seen corresponding path program 1 times [2022-01-10 18:15:29,597 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:15:29,597 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1964923742] [2022-01-10 18:15:29,597 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:15:29,597 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:15:29,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:15:29,647 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:15:29,647 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:15:29,647 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1964923742] [2022-01-10 18:15:29,647 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1964923742] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:15:29,647 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:15:29,647 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:15:29,647 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [763597204] [2022-01-10 18:15:29,647 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:15:29,648 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 18:15:29,648 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:15:29,648 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 18:15:29,648 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 18:15:29,648 INFO L87 Difference]: Start difference. First operand 461 states and 582 transitions. Second operand has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:29,707 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:15:29,707 INFO L93 Difference]: Finished difference Result 892 states and 1133 transitions. [2022-01-10 18:15:29,707 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-01-10 18:15:29,708 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-01-10 18:15:29,708 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:15:29,709 INFO L225 Difference]: With dead ends: 892 [2022-01-10 18:15:29,710 INFO L226 Difference]: Without dead ends: 566 [2022-01-10 18:15:29,710 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:15:29,711 INFO L933 BasicCegarLoop]: 207 mSDtfsCounter, 261 mSDsluCounter, 275 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 261 SdHoareTripleChecker+Valid, 482 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:15:29,712 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [261 Valid, 482 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:15:29,713 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 566 states. [2022-01-10 18:15:29,748 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 566 to 461. [2022-01-10 18:15:29,749 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 461 states, 458 states have (on average 1.2641921397379912) internal successors, (579), 460 states have internal predecessors, (579), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:29,750 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 461 states to 461 states and 579 transitions. [2022-01-10 18:15:29,750 INFO L78 Accepts]: Start accepts. Automaton has 461 states and 579 transitions. Word has length 38 [2022-01-10 18:15:29,750 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:15:29,750 INFO L470 AbstractCegarLoop]: Abstraction has 461 states and 579 transitions. [2022-01-10 18:15:29,750 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:29,751 INFO L276 IsEmpty]: Start isEmpty. Operand 461 states and 579 transitions. [2022-01-10 18:15:29,751 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-01-10 18:15:29,751 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:15:29,751 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:15:29,751 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-10 18:15:29,751 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:15:29,752 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:15:29,752 INFO L85 PathProgramCache]: Analyzing trace with hash 353555609, now seen corresponding path program 1 times [2022-01-10 18:15:29,752 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:15:29,752 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1619597153] [2022-01-10 18:15:29,752 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:15:29,752 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:15:29,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:15:29,797 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:15:29,797 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:15:29,797 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1619597153] [2022-01-10 18:15:29,797 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1619597153] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:15:29,797 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:15:29,798 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 18:15:29,798 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1519493581] [2022-01-10 18:15:29,798 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:15:29,798 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:15:29,798 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:15:29,798 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:15:29,799 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:15:29,799 INFO L87 Difference]: Start difference. First operand 461 states and 579 transitions. Second operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:29,907 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:15:29,907 INFO L93 Difference]: Finished difference Result 1136 states and 1437 transitions. [2022-01-10 18:15:29,907 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 18:15:29,907 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-01-10 18:15:29,907 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:15:29,910 INFO L225 Difference]: With dead ends: 1136 [2022-01-10 18:15:29,910 INFO L226 Difference]: Without dead ends: 810 [2022-01-10 18:15:29,911 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 18:15:29,911 INFO L933 BasicCegarLoop]: 283 mSDtfsCounter, 472 mSDsluCounter, 598 mSDsCounter, 0 mSdLazyCounter, 44 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 472 SdHoareTripleChecker+Valid, 881 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 44 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:15:29,911 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [472 Valid, 881 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 44 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:15:29,912 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 810 states. [2022-01-10 18:15:29,942 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 810 to 458. [2022-01-10 18:15:29,943 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 458 states, 455 states have (on average 1.2593406593406593) internal successors, (573), 457 states have internal predecessors, (573), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:29,944 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 458 states to 458 states and 573 transitions. [2022-01-10 18:15:29,944 INFO L78 Accepts]: Start accepts. Automaton has 458 states and 573 transitions. Word has length 38 [2022-01-10 18:15:29,944 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:15:29,944 INFO L470 AbstractCegarLoop]: Abstraction has 458 states and 573 transitions. [2022-01-10 18:15:29,944 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:29,944 INFO L276 IsEmpty]: Start isEmpty. Operand 458 states and 573 transitions. [2022-01-10 18:15:29,944 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-01-10 18:15:29,944 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:15:29,945 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:15:29,945 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-10 18:15:29,945 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:15:29,945 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:15:29,945 INFO L85 PathProgramCache]: Analyzing trace with hash -1169759521, now seen corresponding path program 1 times [2022-01-10 18:15:29,945 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:15:29,945 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2131386290] [2022-01-10 18:15:29,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:15:29,945 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:15:29,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:15:30,002 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:15:30,002 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:15:30,002 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2131386290] [2022-01-10 18:15:30,002 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2131386290] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:15:30,002 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:15:30,003 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 18:15:30,003 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1060451541] [2022-01-10 18:15:30,003 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:15:30,003 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-10 18:15:30,003 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:15:30,003 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-10 18:15:30,003 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-10 18:15:30,004 INFO L87 Difference]: Start difference. First operand 458 states and 573 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:30,342 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:15:30,342 INFO L93 Difference]: Finished difference Result 2815 states and 3510 transitions. [2022-01-10 18:15:30,342 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-01-10 18:15:30,342 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-01-10 18:15:30,342 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:15:30,348 INFO L225 Difference]: With dead ends: 2815 [2022-01-10 18:15:30,349 INFO L226 Difference]: Without dead ends: 2364 [2022-01-10 18:15:30,349 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2022-01-10 18:15:30,350 INFO L933 BasicCegarLoop]: 205 mSDtfsCounter, 1104 mSDsluCounter, 1272 mSDsCounter, 0 mSdLazyCounter, 118 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1104 SdHoareTripleChecker+Valid, 1477 SdHoareTripleChecker+Invalid, 163 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 118 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:15:30,350 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1104 Valid, 1477 Invalid, 163 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:15:30,352 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2364 states. [2022-01-10 18:15:30,425 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2364 to 853. [2022-01-10 18:15:30,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 853 states, 850 states have (on average 1.2458823529411764) internal successors, (1059), 852 states have internal predecessors, (1059), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:30,429 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 853 states to 853 states and 1059 transitions. [2022-01-10 18:15:30,429 INFO L78 Accepts]: Start accepts. Automaton has 853 states and 1059 transitions. Word has length 41 [2022-01-10 18:15:30,429 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:15:30,429 INFO L470 AbstractCegarLoop]: Abstraction has 853 states and 1059 transitions. [2022-01-10 18:15:30,429 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:30,429 INFO L276 IsEmpty]: Start isEmpty. Operand 853 states and 1059 transitions. [2022-01-10 18:15:30,430 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-01-10 18:15:30,430 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:15:30,430 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:15:30,430 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-10 18:15:30,430 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:15:30,431 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:15:30,431 INFO L85 PathProgramCache]: Analyzing trace with hash -1926913389, now seen corresponding path program 1 times [2022-01-10 18:15:30,431 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:15:30,431 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [46468060] [2022-01-10 18:15:30,431 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:15:30,431 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:15:30,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:15:30,481 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:15:30,482 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:15:30,482 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [46468060] [2022-01-10 18:15:30,482 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [46468060] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:15:30,482 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:15:30,482 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 18:15:30,482 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [574609393] [2022-01-10 18:15:30,482 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:15:30,482 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:15:30,483 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:15:30,483 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:15:30,483 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:15:30,483 INFO L87 Difference]: Start difference. First operand 853 states and 1059 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:30,686 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:15:30,686 INFO L93 Difference]: Finished difference Result 1786 states and 2241 transitions. [2022-01-10 18:15:30,687 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-01-10 18:15:30,687 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-01-10 18:15:30,687 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:15:30,688 INFO L225 Difference]: With dead ends: 1786 [2022-01-10 18:15:30,688 INFO L226 Difference]: Without dead ends: 245 [2022-01-10 18:15:30,690 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-01-10 18:15:30,690 INFO L933 BasicCegarLoop]: 278 mSDtfsCounter, 361 mSDsluCounter, 656 mSDsCounter, 0 mSdLazyCounter, 83 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 361 SdHoareTripleChecker+Valid, 934 SdHoareTripleChecker+Invalid, 100 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 83 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:15:30,691 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [361 Valid, 934 Invalid, 100 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 83 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:15:30,691 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 245 states. [2022-01-10 18:15:30,708 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 245 to 173. [2022-01-10 18:15:30,708 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 173 states, 170 states have (on average 1.1529411764705881) internal successors, (196), 172 states have internal predecessors, (196), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:30,709 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 173 states to 173 states and 196 transitions. [2022-01-10 18:15:30,709 INFO L78 Accepts]: Start accepts. Automaton has 173 states and 196 transitions. Word has length 42 [2022-01-10 18:15:30,709 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:15:30,709 INFO L470 AbstractCegarLoop]: Abstraction has 173 states and 196 transitions. [2022-01-10 18:15:30,709 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:30,709 INFO L276 IsEmpty]: Start isEmpty. Operand 173 states and 196 transitions. [2022-01-10 18:15:30,710 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-01-10 18:15:30,710 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:15:30,710 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:15:30,710 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-01-10 18:15:30,711 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:15:30,711 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:15:30,711 INFO L85 PathProgramCache]: Analyzing trace with hash -1092302268, now seen corresponding path program 1 times [2022-01-10 18:15:30,711 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:15:30,711 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1211498398] [2022-01-10 18:15:30,712 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:15:30,712 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:15:30,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:15:30,771 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:15:30,771 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:15:30,771 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1211498398] [2022-01-10 18:15:30,772 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1211498398] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:15:30,772 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:15:30,772 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 18:15:30,772 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1615061254] [2022-01-10 18:15:30,772 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:15:30,772 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:15:30,772 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:15:30,773 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:15:30,773 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:15:30,773 INFO L87 Difference]: Start difference. First operand 173 states and 196 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:30,852 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:15:30,852 INFO L93 Difference]: Finished difference Result 444 states and 503 transitions. [2022-01-10 18:15:30,853 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-01-10 18:15:30,853 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-01-10 18:15:30,854 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:15:30,855 INFO L225 Difference]: With dead ends: 444 [2022-01-10 18:15:30,856 INFO L226 Difference]: Without dead ends: 0 [2022-01-10 18:15:30,857 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 18:15:30,858 INFO L933 BasicCegarLoop]: 171 mSDtfsCounter, 242 mSDsluCounter, 266 mSDsCounter, 0 mSdLazyCounter, 40 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 242 SdHoareTripleChecker+Valid, 437 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 40 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:15:30,858 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [242 Valid, 437 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 40 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:15:30,858 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-10 18:15:30,858 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-10 18:15:30,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:30,859 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-10 18:15:30,859 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 43 [2022-01-10 18:15:30,859 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:15:30,859 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-10 18:15:30,859 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:15:30,859 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-10 18:15:30,859 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-10 18:15:30,861 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-10 18:15:30,862 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-10 18:15:30,862 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-10 18:15:30,862 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-10 18:15:30,864 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-10 18:15:39,610 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-10 18:15:39,610 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-10 18:15:39,610 INFO L854 garLoopResultBuilder]: At program point L534(lines 530 536) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:15:39,610 INFO L854 garLoopResultBuilder]: At program point L527(lines 523 529) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:15:39,610 INFO L854 garLoopResultBuilder]: At program point L542(lines 537 545) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:15:39,611 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2022-01-10 18:15:39,611 INFO L854 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:15:39,611 INFO L858 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2022-01-10 18:15:39,611 INFO L854 garLoopResultBuilder]: At program point L165-2(lines 165 212) the Hoare annotation is: (let ((.cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse5 (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|)) (.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse4 (<= 1 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse6 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse6) (<= (+ 2 .cse6) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) .cse5 (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse1 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))) (and .cse0 .cse1 .cse2 .cse4 (<= ~methaneLevelCritical~0Int 0)))) [2022-01-10 18:15:39,611 INFO L861 garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true [2022-01-10 18:15:39,611 INFO L854 garLoopResultBuilder]: At program point L213(lines 164 214) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,611 INFO L858 garLoopResultBuilder]: For program point L166(lines 165 212) no Hoare annotation was computed. [2022-01-10 18:15:39,611 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-10 18:15:39,611 INFO L858 garLoopResultBuilder]: For program point L237-3(lines 237 243) no Hoare annotation was computed. [2022-01-10 18:15:39,611 INFO L858 garLoopResultBuilder]: For program point L167(lines 167 171) no Hoare annotation was computed. [2022-01-10 18:15:39,611 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-10 18:15:39,611 INFO L858 garLoopResultBuilder]: For program point L415-3(lines 415 419) no Hoare annotation was computed. [2022-01-10 18:15:39,612 INFO L858 garLoopResultBuilder]: For program point L237-5(lines 236 255) no Hoare annotation was computed. [2022-01-10 18:15:39,612 INFO L858 garLoopResultBuilder]: For program point L175(lines 175 181) no Hoare annotation was computed. [2022-01-10 18:15:39,612 INFO L854 garLoopResultBuilder]: At program point L415-5(lines 411 422) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,612 INFO L858 garLoopResultBuilder]: For program point L269-2(lines 269 286) no Hoare annotation was computed. [2022-01-10 18:15:39,612 INFO L858 garLoopResultBuilder]: For program point L244-3(lines 244 250) no Hoare annotation was computed. [2022-01-10 18:15:39,612 INFO L858 garLoopResultBuilder]: For program point L427(lines 427 431) no Hoare annotation was computed. [2022-01-10 18:15:39,612 INFO L858 garLoopResultBuilder]: For program point L175-2(lines 175 181) no Hoare annotation was computed. [2022-01-10 18:15:39,612 INFO L858 garLoopResultBuilder]: For program point L492-1(lines 492 498) no Hoare annotation was computed. [2022-01-10 18:15:39,612 INFO L854 garLoopResultBuilder]: At program point L261-3(lines 257 263) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,612 INFO L854 garLoopResultBuilder]: At program point L452-3(lines 447 455) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,612 INFO L854 garLoopResultBuilder]: At program point L427-2(lines 423 434) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (let ((.cse3 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse3) (<= (+ 2 .cse3) ~waterLevel~0Int)))) (.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|)) (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,612 INFO L858 garLoopResultBuilder]: For program point L185(lines 185 191) no Hoare annotation was computed. [2022-01-10 18:15:39,612 INFO L854 garLoopResultBuilder]: At program point L497-1(lines 488 501) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) .cse0 .cse1))) [2022-01-10 18:15:39,612 INFO L854 garLoopResultBuilder]: At program point L269-3(lines 265 289) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,613 INFO L858 garLoopResultBuilder]: For program point L922-2(lines 922 942) no Hoare annotation was computed. [2022-01-10 18:15:39,613 INFO L858 garLoopResultBuilder]: For program point L439(lines 439 443) no Hoare annotation was computed. [2022-01-10 18:15:39,613 INFO L858 garLoopResultBuilder]: For program point L185-2(lines 185 191) no Hoare annotation was computed. [2022-01-10 18:15:39,613 INFO L858 garLoopResultBuilder]: For program point L389-3(lines 389 393) no Hoare annotation was computed. [2022-01-10 18:15:39,613 INFO L854 garLoopResultBuilder]: At program point L928-3(lines 913 945) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,613 INFO L854 garLoopResultBuilder]: At program point L484-1(lines 479 487) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0 (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,613 INFO L854 garLoopResultBuilder]: At program point L439-2(lines 435 446) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse4 (<= 1 ~waterLevel~0Int))) (or (and .cse0 .cse1 (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int)))) (and .cse3 .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))) (and .cse3 .cse0 .cse1 .cse4 (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:15:39,613 INFO L858 garLoopResultBuilder]: For program point L195(lines 195 208) no Hoare annotation was computed. [2022-01-10 18:15:39,613 INFO L858 garLoopResultBuilder]: For program point L389-5(lines 389 393) no Hoare annotation was computed. [2022-01-10 18:15:39,613 INFO L854 garLoopResultBuilder]: At program point L254-1(lines 233 256) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,613 INFO L858 garLoopResultBuilder]: For program point L928-2(lines 928 941) no Hoare annotation was computed. [2022-01-10 18:15:39,613 INFO L854 garLoopResultBuilder]: At program point L404(lines 399 406) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 .cse1 (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int)))) (and (<= ~waterLevel~0Int 1) .cse0 .cse1 (<= 1 ~waterLevel~0Int)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,613 INFO L858 garLoopResultBuilder]: For program point L203(lines 203 207) no Hoare annotation was computed. [2022-01-10 18:15:39,613 INFO L854 garLoopResultBuilder]: At program point L395-1(lines 380 398) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 18:15:39,614 INFO L854 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,614 INFO L854 garLoopResultBuilder]: At program point L340-1(lines 335 343) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))) [2022-01-10 18:15:39,614 INFO L858 garLoopResultBuilder]: For program point L203-2(lines 195 208) no Hoare annotation was computed. [2022-01-10 18:15:39,614 INFO L858 garLoopResultBuilder]: For program point L273-3(lines 273 281) no Hoare annotation was computed. [2022-01-10 18:15:39,614 INFO L861 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-01-10 18:15:39,614 INFO L858 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2022-01-10 18:15:39,614 INFO L858 garLoopResultBuilder]: For program point L932-3(lines 932 938) no Hoare annotation was computed. [2022-01-10 18:15:39,614 INFO L858 garLoopResultBuilder]: For program point L237(lines 237 243) no Hoare annotation was computed. [2022-01-10 18:15:39,614 INFO L854 garLoopResultBuilder]: At program point L452-2(lines 447 455) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 18:15:39,614 INFO L854 garLoopResultBuilder]: At program point L261-2(lines 257 263) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:15:39,614 INFO L861 garLoopResultBuilder]: At program point L218(lines 155 220) the Hoare annotation is: true [2022-01-10 18:15:39,614 INFO L858 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-01-10 18:15:39,614 INFO L858 garLoopResultBuilder]: For program point L507-1(line 507) no Hoare annotation was computed. [2022-01-10 18:15:39,614 INFO L858 garLoopResultBuilder]: For program point L415(lines 415 419) no Hoare annotation was computed. [2022-01-10 18:15:39,614 INFO L858 garLoopResultBuilder]: For program point L237-2(lines 236 255) no Hoare annotation was computed. [2022-01-10 18:15:39,615 INFO L854 garLoopResultBuilder]: At program point L331-1(lines 324 334) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 18:15:39,615 INFO L861 garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true [2022-01-10 18:15:39,615 INFO L858 garLoopResultBuilder]: For program point L66-1(lines 66 70) no Hoare annotation was computed. [2022-01-10 18:15:39,615 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 507) no Hoare annotation was computed. [2022-01-10 18:15:39,615 INFO L854 garLoopResultBuilder]: At program point L508-1(lines 503 510) the Hoare annotation is: false [2022-01-10 18:15:39,615 INFO L854 garLoopResultBuilder]: At program point L415-2(lines 411 422) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))) [2022-01-10 18:15:39,615 INFO L858 garLoopResultBuilder]: For program point L269(lines 269 286) no Hoare annotation was computed. [2022-01-10 18:15:39,615 INFO L858 garLoopResultBuilder]: For program point L244-1(lines 244 250) no Hoare annotation was computed. [2022-01-10 18:15:39,615 INFO L858 garLoopResultBuilder]: For program point L306-3(lines 306 312) no Hoare annotation was computed. [2022-01-10 18:15:39,615 INFO L858 garLoopResultBuilder]: For program point L237-6(lines 237 243) no Hoare annotation was computed. [2022-01-10 18:15:39,615 INFO L858 garLoopResultBuilder]: For program point L492(lines 492 498) no Hoare annotation was computed. [2022-01-10 18:15:39,615 INFO L854 garLoopResultBuilder]: At program point L261-1(lines 257 263) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))) [2022-01-10 18:15:39,615 INFO L854 garLoopResultBuilder]: At program point L452-1(lines 447 455) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse3 (<= 1 ~waterLevel~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse5 (<= 1 ~methaneLevelCritical~0Int)) (.cse1 (<= 1 ~systemActive~0Int))) (or (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 .cse4 .cse3 .cse5) (and .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse6 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse6) (<= (+ 2 .cse6) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) .cse5 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse1 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,615 INFO L854 garLoopResultBuilder]: At program point L306-5(lines 299 315) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|)) (.cse3 (let ((.cse8 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse8) (<= (+ 2 .cse8) ~waterLevel~0Int)))) (.cse4 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1))) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0)) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0Int 1) .cse4 (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) .cse5 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1)) .cse6 .cse7) (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 .cse3 .cse4 .cse5 .cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) .cse7))) [2022-01-10 18:15:39,616 INFO L854 garLoopResultBuilder]: At program point L295-1(lines 290 297) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (= ~pumpRunning~0Int 1) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1)) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and (<= ~waterLevel~0Int 1) .cse0))) [2022-01-10 18:15:39,616 INFO L858 garLoopResultBuilder]: For program point L415-6(lines 415 419) no Hoare annotation was computed. [2022-01-10 18:15:39,616 INFO L858 garLoopResultBuilder]: For program point L237-8(lines 236 255) no Hoare annotation was computed. [2022-01-10 18:15:39,616 INFO L854 garLoopResultBuilder]: At program point L497(lines 488 501) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) .cse0 .cse1 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse1 (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 18:15:39,616 INFO L854 garLoopResultBuilder]: At program point L269-1(lines 265 289) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,616 INFO L858 garLoopResultBuilder]: For program point L922(lines 922 942) no Hoare annotation was computed. [2022-01-10 18:15:39,616 INFO L854 garLoopResultBuilder]: At program point L415-8(lines 411 422) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,616 INFO L858 garLoopResultBuilder]: For program point L269-4(lines 269 286) no Hoare annotation was computed. [2022-01-10 18:15:39,616 INFO L858 garLoopResultBuilder]: For program point L244-5(lines 244 250) no Hoare annotation was computed. [2022-01-10 18:15:39,616 INFO L858 garLoopResultBuilder]: For program point L389(lines 389 393) no Hoare annotation was computed. [2022-01-10 18:15:39,616 INFO L854 garLoopResultBuilder]: At program point L928-1(lines 913 945) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~waterLevel~0Int)) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|)) (.cse7 (<= 1 ~methaneLevelCritical~0Int)) (.cse1 (<= 1 ~systemActive~0Int))) (or (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 (<= ~methaneLevelCritical~0Int 0)) (and .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse5 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse5) (<= (+ 2 .cse5) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) .cse6 .cse7 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 .cse1 .cse2 .cse4 .cse3 .cse6 .cse7) (and .cse1 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,616 INFO L854 garLoopResultBuilder]: At program point L484(lines 479 487) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0 (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,616 INFO L858 garLoopResultBuilder]: For program point L492-2(lines 492 498) no Hoare annotation was computed. [2022-01-10 18:15:39,616 INFO L854 garLoopResultBuilder]: At program point L261-5(lines 257 263) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,616 INFO L854 garLoopResultBuilder]: At program point L452-5(lines 447 455) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,616 INFO L858 garLoopResultBuilder]: For program point L389-2(lines 389 393) no Hoare annotation was computed. [2022-01-10 18:15:39,617 INFO L854 garLoopResultBuilder]: At program point L254(lines 233 256) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~waterLevel~0Int)) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|)) (.cse7 (<= 1 ~methaneLevelCritical~0Int)) (.cse1 (<= 1 ~systemActive~0Int))) (or (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 (<= ~methaneLevelCritical~0Int 0)) (and .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse5 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse5) (<= (+ 2 .cse5) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) .cse6 .cse7 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 .cse1 .cse2 .cse4 .cse3 .cse6 .cse7) (and .cse1 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,617 INFO L858 garLoopResultBuilder]: For program point L928(lines 928 941) no Hoare annotation was computed. [2022-01-10 18:15:39,617 INFO L854 garLoopResultBuilder]: At program point L497-2(lines 488 501) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) .cse0 .cse1))) [2022-01-10 18:15:39,617 INFO L854 garLoopResultBuilder]: At program point L269-5(lines 265 289) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,617 INFO L858 garLoopResultBuilder]: For program point L922-4(lines 922 942) no Hoare annotation was computed. [2022-01-10 18:15:39,617 INFO L854 garLoopResultBuilder]: At program point L395(lines 380 398) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 18:15:39,617 INFO L854 garLoopResultBuilder]: At program point L340(lines 335 343) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))) [2022-01-10 18:15:39,617 INFO L858 garLoopResultBuilder]: For program point L389-6(lines 389 393) no Hoare annotation was computed. [2022-01-10 18:15:39,617 INFO L854 garLoopResultBuilder]: At program point L928-5(lines 913 945) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,617 INFO L854 garLoopResultBuilder]: At program point L484-2(lines 479 487) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0 (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,617 INFO L858 garLoopResultBuilder]: For program point L273(lines 273 281) no Hoare annotation was computed. [2022-01-10 18:15:39,617 INFO L858 garLoopResultBuilder]: For program point L932(lines 932 938) no Hoare annotation was computed. [2022-01-10 18:15:39,617 INFO L858 garLoopResultBuilder]: For program point L389-8(lines 389 393) no Hoare annotation was computed. [2022-01-10 18:15:39,617 INFO L854 garLoopResultBuilder]: At program point L254-2(lines 233 256) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 18:15:39,617 INFO L858 garLoopResultBuilder]: For program point L928-4(lines 928 941) no Hoare annotation was computed. [2022-01-10 18:15:39,617 INFO L854 garLoopResultBuilder]: At program point L452(lines 447 455) the Hoare annotation is: (let ((.cse11 (<= ~waterLevel~0Int 1)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse13 (<= 1 ~waterLevel~0Int)) (.cse9 (<= ~methaneLevelCritical~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|)) (.cse12 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|)) (.cse5 (let ((.cse15 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse15) (<= (+ 2 .cse15) ~waterLevel~0Int)))) (.cse6 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1))) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0)) (.cse8 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse14 (<= 1 ~methaneLevelCritical~0Int)) (.cse10 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse11 .cse0 .cse1 .cse3 .cse12 .cse13 .cse14) (and .cse11 .cse0 .cse1 .cse2 .cse3 .cse13 .cse9) (and .cse0 .cse1 .cse3 .cse12 .cse4 .cse5 .cse6 .cse7 .cse8 .cse14 .cse10))) [2022-01-10 18:15:39,618 INFO L854 garLoopResultBuilder]: At program point L261(lines 257 263) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 18:15:39,618 INFO L858 garLoopResultBuilder]: For program point L507(line 507) no Hoare annotation was computed. [2022-01-10 18:15:39,618 INFO L854 garLoopResultBuilder]: At program point L395-2(lines 380 398) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 18:15:39,618 INFO L854 garLoopResultBuilder]: At program point L340-2(lines 335 343) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))) [2022-01-10 18:15:39,618 INFO L854 garLoopResultBuilder]: At program point L331(lines 324 334) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse5 (<= 1 ~waterLevel~0Int)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse6 (<= ~methaneLevelCritical~0Int 0)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|)) (.cse8 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse10 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|)) (.cse11 (let ((.cse16 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse16) (<= (+ 2 .cse16) ~waterLevel~0Int)))) (.cse12 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1))) (.cse13 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0)) (.cse14 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse9 (<= 1 ~methaneLevelCritical~0Int)) (.cse15 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse4 .cse8 .cse5 .cse9) (and .cse1 .cse2 .cse3 .cse4 .cse10 .cse11 .cse12 .cse13 .cse14 .cse6 .cse15 .cse7) (and .cse1 .cse2 .cse4 .cse8 .cse10 .cse11 .cse12 .cse13 .cse14 .cse9 .cse15))) [2022-01-10 18:15:39,618 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 507) no Hoare annotation was computed. [2022-01-10 18:15:39,618 INFO L854 garLoopResultBuilder]: At program point L508(lines 503 510) the Hoare annotation is: false [2022-01-10 18:15:39,618 INFO L858 garLoopResultBuilder]: For program point L273-6(lines 273 281) no Hoare annotation was computed. [2022-01-10 18:15:39,618 INFO L858 garLoopResultBuilder]: For program point L932-6(lines 932 938) no Hoare annotation was computed. [2022-01-10 18:15:39,618 INFO L858 garLoopResultBuilder]: For program point L306(lines 306 312) no Hoare annotation was computed. [2022-01-10 18:15:39,618 INFO L854 garLoopResultBuilder]: At program point L452-4(lines 447 455) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 18:15:39,618 INFO L854 garLoopResultBuilder]: At program point L261-4(lines 257 263) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:15:39,618 INFO L858 garLoopResultBuilder]: For program point L507-2(line 507) no Hoare annotation was computed. [2022-01-10 18:15:39,618 INFO L854 garLoopResultBuilder]: At program point L306-2(lines 299 315) the Hoare annotation is: (let ((.cse12 (= ~pumpRunning~0Int 0)) (.cse13 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|)) (.cse3 (let ((.cse16 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse16) (<= (+ 2 .cse16) ~waterLevel~0Int)))) (.cse5 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1))) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0)) (.cse9 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse15 (<= 1 ~methaneLevelCritical~0Int)) (.cse10 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (.cse11 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|)) (.cse4 (= ~pumpRunning~0Int 1)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0)) (.cse14 (<= 1 ~waterLevel~0Int)) (.cse8 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse11 .cse0 .cse12 .cse1 .cse13 .cse14 .cse15) (and .cse0 .cse12 .cse1 .cse13 .cse2 .cse3 .cse5 .cse7 .cse9 .cse15 .cse10) (and .cse11 .cse0 .cse1 .cse4 .cse6 .cse14 .cse8))) [2022-01-10 18:15:39,618 INFO L854 garLoopResultBuilder]: At program point L295(lines 290 297) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|)) (.cse3 (= ~pumpRunning~0Int 1)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0)) (.cse5 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1)))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) .cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) .cse5 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and (<= ~waterLevel~0Int 1) .cse0 .cse1 .cse3 .cse4 (<= 1 ~waterLevel~0Int) .cse5))) [2022-01-10 18:15:39,619 INFO L854 garLoopResultBuilder]: At program point L331-2(lines 324 334) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 18:15:39,619 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 507) no Hoare annotation was computed. [2022-01-10 18:15:39,619 INFO L854 garLoopResultBuilder]: At program point L508-2(lines 503 510) the Hoare annotation is: false [2022-01-10 18:15:39,619 INFO L858 garLoopResultBuilder]: For program point L306-6(lines 306 312) no Hoare annotation was computed. [2022-01-10 18:15:39,623 INFO L854 garLoopResultBuilder]: At program point L306-8(lines 299 315) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|)) (.cse3 (let ((.cse8 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse8) (<= (+ 2 .cse8) ~waterLevel~0Int)))) (.cse4 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1))) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0)) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0Int 1) .cse4 (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) .cse5 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1)) .cse6 .cse7) (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 .cse3 .cse4 .cse5 .cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) .cse7))) [2022-01-10 18:15:39,623 INFO L854 garLoopResultBuilder]: At program point L295-2(lines 290 297) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (= ~pumpRunning~0Int 1) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1)) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and (<= ~waterLevel~0Int 1) .cse0))) [2022-01-10 18:15:39,625 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:15:39,626 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-10 18:15:39,714 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 06:15:39 BasicIcfg [2022-01-10 18:15:39,714 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-10 18:15:39,715 INFO L158 Benchmark]: Toolchain (without parser) took 12714.17ms. Allocated memory was 197.1MB in the beginning and 665.8MB in the end (delta: 468.7MB). Free memory was 145.1MB in the beginning and 560.8MB in the end (delta: -415.8MB). Peak memory consumption was 381.5MB. Max. memory is 8.0GB. [2022-01-10 18:15:39,715 INFO L158 Benchmark]: CDTParser took 0.10ms. Allocated memory is still 197.1MB. Free memory was 162.2MB in the beginning and 162.1MB in the end (delta: 151.8kB). There was no memory consumed. Max. memory is 8.0GB. [2022-01-10 18:15:39,715 INFO L158 Benchmark]: CACSL2BoogieTranslator took 366.27ms. Allocated memory is still 197.1MB. Free memory was 144.9MB in the beginning and 158.0MB in the end (delta: -13.1MB). Peak memory consumption was 13.6MB. Max. memory is 8.0GB. [2022-01-10 18:15:39,715 INFO L158 Benchmark]: Boogie Procedure Inliner took 70.21ms. Allocated memory is still 197.1MB. Free memory was 158.0MB in the beginning and 154.8MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-10 18:15:39,715 INFO L158 Benchmark]: Boogie Preprocessor took 22.30ms. Allocated memory is still 197.1MB. Free memory was 154.8MB in the beginning and 152.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. [2022-01-10 18:15:39,716 INFO L158 Benchmark]: RCFGBuilder took 495.44ms. Allocated memory is still 197.1MB. Free memory was 152.7MB in the beginning and 132.3MB in the end (delta: 20.4MB). Peak memory consumption was 19.9MB. Max. memory is 8.0GB. [2022-01-10 18:15:39,716 INFO L158 Benchmark]: IcfgTransformer took 89.46ms. Allocated memory is still 197.1MB. Free memory was 132.3MB in the beginning and 124.4MB in the end (delta: 7.9MB). Peak memory consumption was 8.4MB. Max. memory is 8.0GB. [2022-01-10 18:15:39,716 INFO L158 Benchmark]: TraceAbstraction took 11663.66ms. Allocated memory was 197.1MB in the beginning and 665.8MB in the end (delta: 468.7MB). Free memory was 123.9MB in the beginning and 560.8MB in the end (delta: -436.9MB). Peak memory consumption was 360.5MB. Max. memory is 8.0GB. [2022-01-10 18:15:39,719 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.10ms. Allocated memory is still 197.1MB. Free memory was 162.2MB in the beginning and 162.1MB in the end (delta: 151.8kB). There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 366.27ms. Allocated memory is still 197.1MB. Free memory was 144.9MB in the beginning and 158.0MB in the end (delta: -13.1MB). Peak memory consumption was 13.6MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 70.21ms. Allocated memory is still 197.1MB. Free memory was 158.0MB in the beginning and 154.8MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * Boogie Preprocessor took 22.30ms. Allocated memory is still 197.1MB. Free memory was 154.8MB in the beginning and 152.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. * RCFGBuilder took 495.44ms. Allocated memory is still 197.1MB. Free memory was 152.7MB in the beginning and 132.3MB in the end (delta: 20.4MB). Peak memory consumption was 19.9MB. Max. memory is 8.0GB. * IcfgTransformer took 89.46ms. Allocated memory is still 197.1MB. Free memory was 132.3MB in the beginning and 124.4MB in the end (delta: 7.9MB). Peak memory consumption was 8.4MB. Max. memory is 8.0GB. * TraceAbstraction took 11663.66ms. Allocated memory was 197.1MB in the beginning and 665.8MB in the end (delta: 468.7MB). Free memory was 123.9MB in the beginning and 560.8MB in the end (delta: -436.9MB). Peak memory consumption was 360.5MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 507]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 507]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 507]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 127 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 11.5s, OverallIterations: 11, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 8.7s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3856 SdHoareTripleChecker+Valid, 0.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3856 mSDsluCounter, 7318 SdHoareTripleChecker+Invalid, 0.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5059 mSDsCounter, 159 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 624 IncrementalHoareTripleChecker+Invalid, 783 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 159 mSolverCounterUnsat, 2259 mSDtfsCounter, 624 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 74 GetRequests, 24 SyntacticMatches, 0 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 38 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=853occurred in iteration=9, InterpolantAutomatonStates: 63, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 11 MinimizatonAttempts, 2694 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 62 LocationsWithAnnotation, 62 PreInvPairs, 574 NumberOfFragments, 3361 HoareAnnotationTreeSize, 62 FomulaSimplifications, 174156 FormulaSimplificationTreeSizeReduction, 3.1s HoareSimplificationTime, 62 FomulaSimplificationsInter, 169776 FormulaSimplificationTreeSizeReductionInter, 5.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 0.4s InterpolantComputationTime, 360 NumberOfCodeBlocks, 360 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 349 ConstructedInterpolants, 0 QuantifiedInterpolants, 883 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 11 InterpolantComputations, 11 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: ((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive) - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: ((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) || ((((((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) - InvariantResult [Line: 537]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, tmp)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32))) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 324]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || (((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, tmp)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 257]: Loop Invariant Derived loop invariant: ((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive) - InvariantResult [Line: 257]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32))) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 257]: Loop Invariant Derived loop invariant: (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: (((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 335]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive) - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: (((((((~bvule32(1bv32, tmp) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 523]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 324]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32))) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32))) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32))) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) || ((((((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) - InvariantResult [Line: 257]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) || ((((((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 479]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || ((~bvule32(\result, 1bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 335]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive) - InvariantResult [Line: 913]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 335]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive) - InvariantResult [Line: 155]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 479]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || ((~bvule32(\result, 1bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 299]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32))) || ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 299]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 399]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((~bvule32(1bv32, systemActive) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 0bv32 == pumpRunning) - InvariantResult [Line: 257]: Loop Invariant Derived loop invariant: (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 299]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, systemActive) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 324]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 479]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 1bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32))) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 435]: Loop Invariant Derived loop invariant: (((((((~bvule32(1bv32, tmp) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((~bvule32(1bv32, systemActive) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 0bv32 == pumpRunning) - InvariantResult [Line: 423]: Loop Invariant Derived loop invariant: (((((~bvule32(1bv32, tmp) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 0bv32 == pumpRunning) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 0bv32 == pumpRunning) - InvariantResult [Line: 913]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32))) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 913]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32))) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 257]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning RESULT: Ultimate proved your program to be correct! [2022-01-10 18:15:39,794 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...